Senior System Engineer (MSAD, Infrastructure, over $50K)

CL Technical Services Limited; Hong Kong; On-site; HKD 480,000 - 720,000; Full time

Job summary

CL Technical Services Limited is seeking an experienced IT security professional to administer AD DS, manage vulnerability assessments, and coordinate security initiatives across the organization.

The role emphasizes audit governance, remediation coordination, and cross-functional collaboration to strengthen cybersecurity posture while supporting Windows environments and migration projects.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Information Security, or a related discipline.

Responsibilities

• Administer, maintain, and support Active Directory Domain Services (AD DS), ensuring system reliability, availability, and security.
• Manage end-to-end vulnerability assessment activities, including scheduling scans, operating security scanning tools, reviewing findings, and coordinating remediation efforts.
• Analyze vulnerability scan reports and identify genuine security risks while filtering out false positives.
• Coordinate and lead infrastructure security initiatives involving system owners, support teams, and external vendors.
• Conduct regular system security assessments, compliance reviews, and audits in accordance with established security policies and standards.
• Plan and coordinate Windows platform migration projects, ensuring smooth implementation with minimal service disruption.
• Schedule and track security audits for servers, networks, and applications, ensuring timely completion by relevant stakeholders.
• Gather audit evidence and system information, and assist in preparing audit documentation and assignment briefs.
• Collaborate with cross-functional teams to drive continuous improvements in cybersecurity posture and operational efficiency.
• Prepare management reports, technical documentation, audit summaries, and project progress updates.

Skills

Active Directory Administration

Vulnerability Management

Security Audits & Compliance

Project Coordination

Communication Skills

Education

Bachelor's degree in Computer Science, Information Technology, Information Security, or a related discipline

Tools

SAST/DAST tools

Windows Server

Job description

• Competitive salary
• Active Directory Domain Services
• Scanning and application security testing tools (SAST/DAST)

Key Responsibilities

• Administer, maintain, and support Active Directory Domain Services (AD DS), ensuring system reliability, availability, and security.
• Manage end-to-end vulnerability assessment activities, including scheduling scans, operating security scanning tools, reviewing findings, and coordinating remediation efforts.
• Analyze vulnerability scan reports and identify genuine security risks while filtering out false positives.
• Coordinate and lead infrastructure security initiatives involving system owners, support teams, and external vendors.
• Conduct regular system security assessments, compliance reviews, and audits in accordance with established security policies and standards.
• Plan and coordinate Windows platform migration projects, ensuring smooth implementation with minimal service disruption.
• Schedule and track security audits for servers, networks, and applications, ensuring timely completion by relevant stakeholders.
• Gather audit evidence and system information, and assist in preparing audit documentation and assignment briefs.
• Collaborate with cross-functional teams to drive continuous improvements in cybersecurity posture and operational efficiency.
• Prepare management reports, technical documentation, audit summaries, and project progress updates.

Job Requirements

• Bachelor's degree in Computer Science, Information Technology, Information Security, or a related discipline.
• Minimum 5 years of experience in system analysis, IT infrastructure support, system administration, or security operations.
• Solid hands-on experience in Active Directory Domain Services (AD DS) administration, maintenance, and troubleshooting.
• Proven experience in vulnerability management, including the use of vulnerability scanning and application security testing tools (SAST/DAST), as well as remediation coordination.
• Strong understanding of infrastructure, operating system, network, and web application security vulnerabilities.
• Ability to review and interpret security scan results, assess risk severity, and distinguish genuine threats from false positives.
• Familiarity with security governance, compliance requirements, and audit processes.
• Knowledge of government IT security standards, policies, and guidelines is an advantage.
• Experience with Windows Server environments and migration projects is preferred.
• Strong project management and stakeholder coordination skills with the ability to manage multiple initiatives simultaneously.
• Excellent communication and interpersonal skills, with the ability to work effectively with technical and non-technical stakeholders.
• Strong analytical, organizational, and problem-solving abilities.
• Experience preparing professional reports, audit documentation, and management presentations.

The personal information is collected strictly for recruitment purpose only.